Description
Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Devolutions | Devolutions Server | ≤ 2022.3.9 | — |
Medium · 6.5
CVE-2023-0661
EUVD-2023-12694GHSA-whfj-p5r5-33pr
Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data.
Published Feb 3, 2023 · Updated Mar 25, 2025 · Assigned by DEVOLUTIONS